Vulnwatch: by author

87 messages starting May 16 05 and ending May 25 05
Date index | Thread index | Author index


alert7

Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability alert7 (May 16)

Andreas Constantinides

zOOM Media Gallery - Simple SQL Injection discovery Andreas Constantinides (Apr 11)

Andrew

Microsoft Windows image rendering DoS vuln Andrew (Apr 11)

Bakchodiya

Security issue in Microsoft Outlook Bakchodiya (May 19)

bugs

Linux kernel pktcdvd ioctl break user space limit vulnerability [corrected] bugs (May 17)

Cesar

[Argeniss] MS05-012 Exploit Cesar (May 31)
- Argeniss - Oracle exploits and workarounds Cesar (Apr 18)

CIRT.DK Mailinglists

[CIRT.DK - Advisory] Novell eDirectory 8.7.3 DOS Device name Denial of Service CIRT.DK Mailinglists (Jun 13)
[CIRT.DK - Advisory] Novell Nsure Audit 1.0.1 Denial of Service CIRT.DK Mailinglists (Apr 24)
[CIRT.DK - Advisory] Novell iManager 2.0.2 ASN.1 Parsing vulnerability in Apache module CIRT.DK Mailinglists (Jun 13)

class

Microsoft WINS Vulnerability + OS/SP Scanner class (May 02)
Microsoft WINS Vulnerability + OS/SP Scanner (source) class (May 02)
Re: [Full-disclosure] BakBone NetVault last warning class (May 11)
BakBone NetVault last warning class (May 11)

class101 () HAT-SQUAD com

BakBone NetVault 6.x/7.x multiples vulnerabilities + exploit class101 () HAT-SQUAD com (Apr 13)
BakBone Netvault 6.x/7.x Local Stack Buffer Overflow class101 () HAT-SQUAD com (Apr 01)
BakBone Netvault 6.x/7.x Remote Heap Buffer Overflow class101 () HAT-SQUAD com (Apr 01)
Microsoft Windows Internet Name Service (WINS) Remote Heap Overflow Exploit class101 () HAT-SQUAD com (Apr 04)
BakBone products multiple vulnerabilities class101 () HAT-SQUAD com (Apr 01)

David Remahl

[DR018] Quartz Composer / QuickTime 7 information leakage David Remahl (May 11)
[DR001] AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability David Remahl (Apr 17)
Advisories for 4 vulnerabilities addressed by Apple SU 2005-005 David Remahl (May 03)

dong-hun you

GLD (Greylisting daemon for Postfix) multiple vulnerabilities. dong-hun you (Apr 12)
[INetCop Security Advisory] Snmppd potentially format string vulnerability. dong-hun you (Apr 25)

Gary O'leary-Steele

[SEC-1 LTD] RSA SecurID Web Agent Heap Overflow Gary O'leary-Steele (May 06)

GreyMagic Security

File Selection May Lead to Command Execution (GM#015-IE) GreyMagic Security (Apr 19)

iDEFENSE Labs

iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent Error Status Remote DoS Vulnerability iDEFENSE Labs (Jun 23)
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Remote File Inclusion Vulnerability iDEFENSE Labs (Jun 22)
iDEFENSE Security Advisory 06.22.05: IpSwitch WhatsUp Professional 2005 (SP1) SQL Injection Vulnerability iDEFENSE Labs (Jun 22)
Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability: Veritas Backup Exec Remote Agent NDMLSRVR.DLL DoS Vulnerability iDEFENSE Labs (Jun 23)
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Server Remote Registry Access Vulnerability iDEFENSE Labs (Jun 23)
iDEFENSE Security Advisory 06.23.05: RealNetworks RealPlayer RealText Parsing Heap Overflow Vulnerability iDEFENSE Labs (Jun 23)
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Multiple SQL Injection Vulnerabilities iDEFENSE Labs (Jun 22)
iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV Cabinet File Handling DoS Vulnerability iDEFENSE Labs (Jun 29)
iDEFENSE Security Advisory 06.23.05: Veritas Backup Exec Agent CONNECT_CLIENT_AUTH Buffer Overflow Vulnerability iDEFENSE Labs (Jun 23)
iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti config_settings.php Remote Code Execution Vulnerability iDEFENSE Labs (Jun 22)
iDEFENSE Security Advisory 06.29.05: Clam AntiVirus ClamAV MS-Expand File Handling DoS Vulnerability iDEFENSE Labs (Jun 29)

James Bender

RE: Blank Administrator password in DELL XP Professional install James Bender (Jun 28)

khaalel

KSpynix ::: the Unix version of KSpyware? (Proof Of Concept) khaalel (May 06)
tHorK FrameWork beta v0.1::: another exploit framework khaalel (May 02)
The first open source spyware khaalel (Apr 18)

Luis A. Cortes Zavala

Microsoft Windows Image Rendering Memory Limit DoS Luis A. Cortes Zavala (May 03)
Hotmail Advisories Luis A. Cortes Zavala (May 03)

Mark Litchfield

Vulnerability Statements Mark Litchfield (Jun 23)

Matthew Murphy

Microsoft Windows NTFS Information Disclosure Matthew Murphy (Jun 30)

Matthias Andree

leafnode security announcement leafnode-SA-2005-01 Matthias Andree (May 04)
leafnode security announcement leafnode-SA-2005-02 (CAN-2005-1911) Matthias Andree (Jun 08)

Michael Scheidell

Blank Administrator password in DELL XP Professional install Michael Scheidell (Jun 27)
RE: Blank Administrator password in DELL XP Professional install Michael Scheidell (Jun 28)

Next Generation Insight Security Research (NGS Software)

Remote Buffer Overflow in Lotus Domino Next Generation Insight Security Research (NGS Software) (Apr 12)

NGSSoftware Insight Security Research

Sybase ASE Multiple Security Issues (#NISR05042005) NGSSoftware Insight Security Research (Apr 05)
Buffer overflow vulnerability in VERITAS Software Backup Exec Web Administration Console (BEWAC) NGSSoftware Insight Security Research (Jun 23)
Windows kernel overflow fixed NGSSoftware Insight Security Research (Apr 13)
Remote Unauthenticated Heap Overflow VERITAS Backup Exec Server for Windows NGSSoftware Insight Security Research (Jun 23)
Multiple medium risk flaws fixed in new version of PHP (late advisory) NGSSoftware Insight Security Research (Apr 12)
Patch available for critical Veritas i3 Server vulnerability NGSSoftware Insight Security Research (Apr 12)
High Risk Vulnerability in HTML Help (ITSS Parser) NGSSoftware Insight Security Research (Jun 15)
High Risk Vulnerability in RealPlayer for Windows NGSSoftware Insight Security Research (Jun 27)
Multiple High Risk flaws fixed in Oracle NGSSoftware Insight Security Research (Apr 12)
High risk flaw in HP OpenView Radia Management Agent NGSSoftware Insight Security Research (Apr 28)

Paul Laudanski

Re: phpbb 2.0.15 released - patches high critical vuln Paul Laudanski (May 12)
CastleCops phpBB bbcode Input Validation Disclosure Paul Laudanski (Jun 02)

Paul Starzetz

Linux kernel ELF core dump privilege elevation Paul Starzetz (May 11)

Pieter de Boer

Local root vuln in VPN daemon on MacOS X Pieter de Boer (May 04)

Secure Computer Group

[CAN-2005-1062] Administration protocol abuse allows local/remote password cracking Secure Computer Group (Apr 29)
[CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service Secure Computer Group (Apr 29)

shadown

ADV: NetTerm's NetFtpd 4.2.2 Buffer Overflow + PoC Exploit shadown (Apr 26)

Sherwyn Williams

Open ssh expliot Sherwyn Williams (May 02)

Siegfried

ZRCSA-200501 - Multiple vulnerabilities in Claroline Siegfried (Apr 27)

Steve Manzuik

eEye Advisory - EEYEB-200505 - RealPlayer AVI Processing Overflow Steve Manzuik (Jun 23)
eEye Advisory - EEYEB-20050316 - HTML Help File Parsing Buffer Overflow Steve Manzuik (Jun 14)
DNS Changes at VulnWatch.Org Steve Manzuik (May 02)
FW: iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability Steve Manzuik (Jun 15)

Steven M. Christey

Re: Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability Steven M. Christey (May 17)

Team SHATTER

[AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package Team SHATTER (Apr 18)
[AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability Team SHATTER (May 27)
[AppSecInc Team SHATTER Security Advisory] SQL Injection in ALTER_MANUALLOG_CHANGE_SOURCE procedure Team SHATTER (Apr 18)
[AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability Team SHATTER (May 27)
[AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_CDC_SUBSCRIBE and DBMS_CDC_ISUBSCRIBE packages Team SHATTER (Apr 18)
[AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure Team SHATTER (Apr 18)
[AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia Team SHATTER (Apr 18)
[AppSecInc Advisory WEBSP05-V0098] Remote Buffer overflow in WebSphere Application Server Administrative Console Team SHATTER (Jun 07)

Tim

ClamAV: Local Privilege Escalation Vulnerability On MacOS [SCN Advisory #04] Tim (May 27)

ZATAZ Audits

xmysqladmin insecure temporary file creation ZATAZ Audits (Jun 09)
LutelWall <= 0.97 insecure temporary file creation ZATAZ Audits (Jun 06)
GIPTables Firewall <= v1.1 insecure temporary file creation ZATAZ Audits (Jun 06)

ZATAZ.net

shtool insecure temporary file creation ZATAZ.net (May 25)